Hello, You should be able to "man iptables" -A, --append chain rule-specification Append one or more rules to the end of the selected chain. When the source and/or destination names resolve to more than one address, a rule will be added for each possible address combination. -I, --insert chain [rulenum] rule-specification Insert one or more rules in the selected chain as the given rule number. So, if the rule number is 1, the rule or rules are inserted at the head of the chain. This is also the default if no rule number is specified. On Sun, 13 Jun 2004 12:36:55 -0700 "Spiro Azkoul" <spiro@xxxxxxxxxxx> wrote: > > > t > > Hello, > > You are using "iptables -A" ... this will append this rule to your > list. If you > have an accept rule further up that this connection would match then it will > be > accepted but it hits this rule. > > You should do a "iptables -I" to insert the rule at the top. > > Michael. > > I am not sure I understand the difference between -I and -A > Where can I find docs on this? > Thanks Michael > > > > > > > > -- Michael Gale Network Administrator Utilitran Corporation